What is the purpose of the authorisation groups?

Functions and access can be restricted to certain authorisation groups. For example, a user can only pay invoices in a business account if authorised to do so.